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DETAILED ACTION 

Claim Objections 

1 . Claims 1 3 and 26 are objected to because of the following informalities: 

a. In claim 13, line 3, following the word error, "is" should be changed to -if-. 

b. In claim 26, there are two steps (d); the second one should be changed to 
step (e). 

Appropriate correction is required. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-8, 10-13, 15-21, 23-24 and 26 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Vasko (2003/0208283) in view of Rosenquist (2002/0133680). 

As per claim 1, Vasko discloses a safety controller comprising: a processing unit 
having a processor executing instructions, and a memory holding instructions and data, 
wherein the memory is adapted to hold a standard program and safety program, the 
safety program requires higher reliability execution than the standard program [Figs. 2 
and 5; pars. 2,22,42-43,48,51]. 
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However, Vasko does not specifically teach the processing unit providing a 
hardware lock preventing writing of at least a portion of the memory as controllable by a 
lock instruction; and a lock management program executable on the processing unit 
unlocks a portion of memory holding the safety program at times when the safety 
program is executing and locking the portion of memory at other times as required by 
the claim. 

Rosenquist discloses the processing unit providing a hardware lock preventing 
writing of at least a portion of the memory as controllable by a lock instruction [par. 16]; 
and a lock management program executable on the processing unit unlocks a portion of 
memory holding the safety program at times when the safety program is executing and 
locking the portion of memory at other times [pars. 8-9 and 25] to prevent writing to the 
memory portion (par. 16). 

Since the technology for implementing a safety controller with the processing unit 
providing a hardware lock preventing writing of at least a portion of the memory as 
controllable by a lock instruction was well known as evidenced by Rosenquist, an 
artisan would have been motivated to implement this feature in the system of Vasko to 
prevent writing to the memory portion. Thus, it would have been obvious to one of 
ordinary skill in the art, at the time of invention by Applicant to modify the system of 
Vasko to include the processing unit providing a hardware lock preventing writing of at 



Application/Control Number: 10/661 ,885 Page 4 

Art Unit: 2188 

least a portion of the memory as controllable by a lock instruction because this would 
have prevented writing to the memory portion (par. 16) as taught by Rosenquist. 

As per claim 2, Rosenquist discloses the portion of memory also holds data 
operated on by the safety program [par. 7]. 

As per claim 3, Vasko discloses I/O circuitry exchanging input/output values with 
an external machine and wherein the data includes input/output values [Fig. 6]. 

As per claim 4, Rosenquist discloses the lock management program executable 
on the processing unit is different from the safety program [pars. 8-9 and 25]. 

As per claim 5, Rosenquist discloses the lock management program executable 
on the processing unit is an operating system running on the processing unit and 
scheduling the execution of the safety program and standard program [par. 6]. 

As per claim 6, Rosenquist discloses the lock management program executable 
on the processing unit confirms the memory portion is locked at the start of the safety 
program before unlocking the memory portion and invokes an error if the memory 
portion is not locked at the start of the safety program before unlocking the memory 
portion [pars. 7 and 23]. 
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As per claim 7, Rosenquist discloses lock instruction is a setting of a register 
indicating the status of different memory portions as locked and unlocked [par. 21]. 

As per claim 8, Rosenquist discloses the hardware lock operates so that the 
locked portion of memory may be read [Fig. 2, par. 7]. 

As per claim 10, Rosenquist discloses the lock management program executes 
to keep the portion of memory holding the standard program unlocked [par. 9]. 

As per claim 1 1 , Rosenquist discloses the lock management program is a portion 
of the safety program unlocking the memory portion at the start of safety program and 
locking the memory portion at the conclusion of the safety program [pars. 7 and 23]. 

As per claim 12, Vasko discloses the portion of memory holding the safety 
program also holds a copy of selected data generated by the standard program [Fig.6, 
par. 75]. 

As per claim 13, Rosenquist discloses a lock check program periodically 
checking the status of the portion of memory holding the safety program when a safety 
program is not executing and invoking an error is the memory portion holding the safety 
program is unlocked [pars. 20 and 28]. 
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As per claim 15, Rosenquist discloses the second processing unit provides a 
hardware lock preventing writing of at least a portion of the memory adapted to hold a 
copy of the safety program as controllable by a lock instruction [par. 16]. 

As per claim 16, the rationale in the rejection of claim 1 is herein incorporated. 
Vasko further discloses loading a first portion of memory with a standard program and a 
second portion of memory with a safety program, the safety program requiring higher 
reliability execution than the standard program [Figs. 2 and 5; par. 63]. 

However, Vasko does not specifically teach executing the safety program and 
standard program at different times and unlocking the second portion of memory at 
times when the safety program is executing and locking the second portion of memory 
at other times as required by the claim. 

Rosenquist discloses executing the safety program and standard program at 
different times and unlocking the second portion of memory at times when the safety 
program is executing and locking the second portion of memory at other times [Fig.1; 
pars. 7-8 and 18-19] to prevent writing to the memory portion (par. 16). 

Since the technology for implementing a safety controller with executing the 
safety program and standard program at different times and unlocking the second 
portion of memory at times when the safety program is executing and locking the 
second portion of memory at other times was well known as evidenced by Rosenquist, 



Application/Control Number: 10/661 ,885 Page 7 

Art Unit: 2188 

an artisan would have been motivated to implement this feature in the system of Vasko 
to prevent writing to the memory portion. Thus, it would have been obvious to one of 
ordinary skill in the art, at the time of invention by Applicant to modify the system of 
Vasko to include executing the safety program and standard program at different times 
and unlocking the second portion of memory at times when the safety program is 
executing and locking the second portion of memory at other times because this would 
have prevented writing to the memory portion (par. 16) as taught by Rosenquist. 

As per claim 17, Rosenquist discloses the second portion of memory also holds 
data operated on by the safety program [par. 7]. 

As per claim 18, Vasko discloses the safety controller includes I/O circuitry 
exchanging input/output values with an external machine and wherein the data includes 
input/output values [Fig.6]. 

As per claim 19, Rosenquist discloses the second portion of memory is locked at 
the start of the safety program before unlocking the second portion of memory and 
invoking an error if the second portion of the memory portion is not locked before the 
unlocking [pars. 7 and 23]. 

As per claim 20, Rosenquist discloses lock instruction is a setting of a register 
indicating the status of different memory portions as locked and unlocked [par. 21]. 
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As per claim 21 , Rosenquist discloses the hardware lock operates so that the 
locked portion of memory may be read but not written [Fig. 2, par. 7]. 

As per claim 23, Rosenquist discloses the lock management program executes 
to keep the portion of memory holding the standard program unlocked [par. 9]. 

As per claim 24, Rosenquist discloses periodically checking the status of the 
second portion of memory when a safety control program is not executing and invoking 
an error if the memory portion is unlocked [pars. 20 and 28]. 

As per claim 26, Vasko discloses a method of operating a safety controller 
system comprising the steps of: accepting program instructions from a user describing 
the logical combination of input sensor data to produce output control data [par.3]. 

However, Vasko does not specifically teach collecting the program instructions 
into logical tasks; identifying the task as to one of two levels of reliability, a first level 
being of higher reliability than the second level; 

Rosenquist discloses collecting the program instructions into logical tasks [par. 
25]; identifying the task as to one of two levels of reliability, a first level being of higher 
reliability than the second level [par. 28]; loading a task of the first level into a first 
portion of memory and a task of the second level into a second portion of memory [pars. 
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18-19]; executing the loaded tasks at different times and unlocking the first portion of 
memory at times when the task of the first level is executing and locking the second 
portion of memory at other times [pars. 8-9 and 25] to prevent writing to the memory 
portion (par: 16). 

Since the technology for implementing a safety controller with loading a task of 
the first level into a first portion of memory and a task of the second level into a second 
portion of memory was well known as evidenced by Rosenquist, an artisan would have 
been motivated to implement this feature in the system of Vasko to prevent writing to 
the memory portion. Thus, it would have been obvious to one of ordinary skill in the art, 
at the time of invention by Applicant to modify the system of Vasko to include loading a 
task of the first level into a first portion of memory and a task of the second level into a 
second portion of memory because this would have prevented writing to the memory 
portion (par. 16) as taught by Rosenquist 

4. Claims 9 and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Vasko (2003/0208283) in view of Rosenquist (2002/0133680) as applied to claims 1 
and 16 above, and further in view of Gafken (6,026,016). 

As per claims 9 and 22, Vasko and Rosenquist disclose the claimed invention as 
discussed above in the previous paragraphs. However, Vasko and Rosenquist do not 
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specifically teach the hardware lock operates so that different portions of memory may 
be simultaneously locked and unlocked as required by the claim. 

Gafken discloses the hardware lock operates so that different portions of memory 
may be simultaneously locked and unlocked [Fig. 3] to disable and enable write, erase, 
and read operations to the blocks of memory (col.1 , lines 9-10). 

Since the technology for implementing a safety controller with the hardware lock 
operates so that different portions of memory may be simultaneously locked and 
unlocked was well known as evidenced by Gafken, an artisan would have been 
motivated to implement this feature in the system of Vasko and Rosenquist since this 
would have disabled and enabled write, erase and read operations to the blocks of 
memory. Thus, it would have been obvious to one of ordinary skill in the art at the time 
of invention by Applicant to modify the system of Vasko and Rosenquist to include the 
hardware lock operates so that different portions of memory may be simultaneously 
locked and unlocked because this would have enabled and disabled write, erase and 
read operations to the blocks of memory (col.1, lines 9-10) as taught by Gafken. 

5. Claims 14 and 25 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Vasko (2003/0208283) in view of Rosenquist (2002/0133680) as applied to claims 
1 and 16 above, and further in view of Danielsen (5,136,704). 
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As per claims 14 and 25, Vasko and Rosenquist disclose the claimed invention 
as discussed above in the previous paragraphs. Vasko further discloses a second 
processing unit having a processor executing instructions, and a memory adapted to 
hold a copy of the safety program [Figs.2; pars. 22, 42-43]. 

However Vasko and Rosenquist do not specifically teach a synchronization 
program executable by the processing units to execute the safety program on both 
processing units and compare execution of the safety programs and to enter a safety 
state when this execution differs as required by the claim. 

Danielsen discloses a synchronization program executable by the processing 
units to execute the safety program on both processing units and compare execution of 
the safety programs and to enter a safety state when this execution differs [Fig. 3; col. 5, 
lines 25-45] to identify a faulty condition between the processing units (col. 5, lines 36- 
40). 

Since the technology for implementing a safety controller with a synchronization 
program executable by the processing units to execute the safety program on both 
processing units and compare execution of the safety programs and to enter a safety 
state when this execution differs was well known as evidenced by Danielsen, an artisan 
would have been motivated to implement this feature in the system Vasko and 
Rosenquist since this would have helped identified a faulty condition between the 
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processing units. Thus, it would have been obvious to one of ordinary skill in the art at 
the time of invention by Applicant to modify the system of Vasko and Rosenquist to 
include a synchronization program executable by the processing units to execute the 
safety program on both processing units and compare execution of the safety programs 
and to enter a safety state when this execution differs because this would have 
identified a faulty condition between the processing units (col. 5, lines 36-40) as taught 
by Danielsen. 

Conclusion 

6. When responding to the office action, Applicant is advised to clearly point out the 
patentable novelty that he or she thinks the claims present in view of the state of the art 
disclosed by references cited or the objections made. He or she must also show how 
the amendments avoid such references or objections. See 37 C.F.R. 1.111(c). 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mardochee Chery whose telephone number is (571) 
272-4246. The examiner can normally be reached on 8:30A-5:00P. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Manonama Padmanabhan can be reached on (571) 272-4210. The fax 
phone number for the organization where this application or proceeding is assigned is 
703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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